IBM Tivoli Monitoring versions 6.3.0.7 through 6.3.0.7 Service Pack 21 contain a directory traversal vulnerability. This flaw allows a remote attacker to send crafted URL requests with directory traversal sequences (/../) to access arbitrary files on the affected system without authentication.